Ping reaches openvpn server instead of connected client

gijs007

I've got my client connected to my VPN properly, everything seems to connect fine but the VPN can not be used to transfer data...

For example when I ping the IP that is assigned to the client I get the same ping response as to the other IP's for the server that runs the VPN, normally when pinging a VPN there is an increase in ping (since the traffic needs to travel from the openvpn server to client and back)
Even when turning off openvpn the ping response keeps working, indicating that the traffic is routed at the server and not being routed in to the VPN.

My config looks like:

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh2048.pem
server 23.246.204.8 255.255.255.248
ifconfig-pool-persist ipp.txt
keepalive 10 120
persist-key
persist-tun
status openvpn-status.log
verb 3

Any idea's on what might be wrong?
My openvpn server runs on Ubuntu 14.04 and I've followed this tutorial: http://ubuntuguide.org/wiki/OpenVPN_server

gijs007

That is in fact correct, the plan is to route traffic from server A on the internet to server B on the internet and from there to the destination on the internet. Just like a proxy.

It's pretty much the same as people who want anonymous internet and use a VPN for it. Connecting their internet PC to another Server and from there to the destination.

This is because datacenter B has expensive prices for dedicated servers(e.g. 800 dollar per month for a server which costs 200 dollar at normal datacenters) and doesn't offer colocation, but they have very good routing.
Datacenter A is much cheaper and has good routing to datacenter B, this way I can save a lot of money and still benefit of the fast network of datacenter B.

gijs007

Edited my config to:

port 1194
proto udp
dev tap
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh2048.pem
server-bridge 23.246.204.8 255.255.255.248 23.246.204.11 23.246.204.14
ifconfig-pool-persist ipp.txt
keepalive 10 120
persist-key
persist-tun
status openvpn-status.log
verb 3

And uploaded the following bridge-start script to /etc/openvpn/

#!/bin/bash

#################################
# Set up Ethernet bridge on Linux
# Requires: bridge-utils
#################################

# Define Bridge Interface
br="br0"

# Define list of TAP interfaces to be bridged,
# for example tap="tap0 tap1 tap2".
tap="tap0"

# Define physical ethernet interface to be bridged
# with TAP interface(s) above.
eth="eth1:1"
eth_ip="23.246.204.11"
eth_netmask="255.255.255.248"
eth_broadcast="23.246.204.15"

for t in $tap; do
    openvpn --mktun --dev $t
done

brctl addbr $br
brctl addif $br $eth

for t in $tap; do
    brctl addif $br $t
done

for t in $tap; do
    ifconfig $t 0.0.0.0 promisc up
done

ifconfig $eth 0.0.0.0 promisc up

ifconfig $br $eth_ip netmask $eth_netmask broadcast $eth_broadcast

I now have the following questions:
1. How do I run bridge-start
I currently I get the error: command not found.
2. How do I make it start at bootup?

gijs007

Okay I'm running the script manually:

openvpn --mktun --dev tap0
brctl addbr br0
ip link set dev br0 up
brctl addif br0 eth1:0
ip link set dev br0 up
brctl addif br0 tap0
ip link set dev br0 up
ifconfig tap0 0.0.0.0 promisc up
ifconfig eth1:0 0.0.0.0 promisc up
ifconfig br0 23.246.204.11 255.255.255.248 broadcast 23.246.204.15

But once it reaches: brctl addif br0 tap0 I get the following error: dev is duplicate or tap0 is garbage
How can I resolve this?